CVE-2024-21944

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

Score

CVSS 3.1 5.3 Medium

Status

Awaiting Analysis - psirt@amd.com

Published

2026-06-10

Last modified

2026-06-11

Weaknesses

CWE-20

Affected products

• Amd Epyc 7003 Series Processors (Amd)
• Amd Epyc 9004 Series Processor (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3015.html